@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/crypto/messages.js

@@ -0,0 +1,180 @@
+import { ProtocolError } from '../errors.js';
+import { validateIdentifier } from '../identity/identifiers.js';
+import { validateAccountId } from '../identity/neo.js';
+import { contactAuthorizationCodec } from '../models/contacts.js';
+import { certificateId, deviceCertificateCodec, validateCertificate } from '../models/identity.js';
+import { messageEnvelopeCodec, messageEnvelopeInput, messageKeyBoxCodec, messagePayloadCodec, validateMessageKeyBox, validateMessageSendRequest, verifyMessageEnvelope } from '../models/messages.js';
+import { signingInput } from '../protocol/context.js';
+import { concatBytes, encodeBase64Url, encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalBytes, parseJson, requireSafeInteger } from '../protocol/json.js';
+import { throwIfAborted } from '../runtime/clock.js';
+import { agreeKey, decryptAes, deriveKey, encryptAes, encryptionPublicKey, requireLength, sha256, systemRandom } from './primitives.js';
+const keyBoxSalt = sha256(encodeUtf8('Meshline/keybox-salt/v1'));
+function validateHeader(value) {
+    validateIdentifier('message', value.messageId);
+    validateIdentifier('device', value.fromDeviceId);
+    validateAccountId(value.from);
+    validateAccountId(value.to);
+    requireSafeInteger(value.createdAt, 0);
+}
+/** Fixed protocol projection; envelope extensions are signed but are not part of payload AAD. */
+export function messageAad(value, context) {
+    validateHeader(value);
+    return signingInput({ $type: 'meshline.message.aad', message_id: value.messageId, created_at: value.createdAt, from: value.from, from_device_id: value.fromDeviceId, to: value.to }, context);
+}
+/** Fixed projection shared by HKDF info and AES-GCM key wrapping AAD. */
+export function messageKeyBoxAad(value, box, account, context) {
+    validateHeader(value);
+    validateAccountId(account);
+    validateIdentifier('device', box.deviceId);
+    requireLength(box.enc, 32, 'Ephemeral public key');
+    if (account !== value.from && account !== value.to)
+        throw new ProtocolError('invalid_identity', 'Key box account must be a message participant.');
+    if (box.alg !== 'X25519-HKDF-SHA256-AES256GCM' || value.payload.alg !== 'AES-256-GCM')
+        throw new ProtocolError('unsupported_algorithm', 'Unsupported message key wrapping algorithms.');
+    return signingInput({ $type: 'meshline.message.key_box.aad', alg: box.alg, payload_alg: value.payload.alg, message_id: value.messageId,
+        created_at: value.createdAt, from: value.from, from_device_id: value.fromDeviceId, account, device_id: box.deviceId, enc: encodeBase64Url(box.enc) }, context);
+}
+/** Builds immutable delivery material. Device lists must come from current authoritative states, checked by the calling manager. */
+export async function encryptMessage(options) {
+    const { context, signer, messageId, createdAt, recipient, signal } = options;
+    throwIfAborted(signal);
+    const random = options.random ?? systemRandom;
+    const certificate = deviceCertificateCodec.decode(deviceCertificateCodec.encode(signer.certificate));
+    validateCertificate(certificate, context);
+    const senderId = certificateId(certificate, context);
+    const recipients = copyDevices(options.recipientDevices, recipient, createdAt, context);
+    const senders = recipient === certificate.account ? undefined : copyDevices(options.senderDevices ?? [certificate], certificate.account, createdAt, context);
+    const authorization = options.authorization === undefined ? undefined : contactAuthorizationCodec.decode(contactAuthorizationCodec.encode(options.authorization));
+    if (createdAt < certificate.notBefore || createdAt >= certificate.expiresAt)
+        throw new ProtocolError('unauthorized_device', 'Message signer certificate is outside its validity window.');
+    if (recipient === certificate.account && (authorization !== undefined || options.senderDevices !== undefined))
+        throw new ProtocolError('invalid_self_delivery', 'Self messages must omit sender devices and authorization.');
+    const header = { messageId, createdAt, from: certificate.account, fromDeviceId: senderId, to: recipient };
+    const aad = messageAad(header, context);
+    const plaintext = canonicalBytes(messagePayloadCodec.decode(options.payload));
+    let contentKey;
+    try {
+        contentKey = random.bytes(32);
+        requireLength(contentKey, 32, 'Content key');
+        const nonce = random.bytes(12);
+        requireLength(nonce, 12, 'Payload nonce');
+        let envelope = { ...header, payload: { alg: 'AES-256-GCM', nonce, ciphertext: encryptAes(contentKey, nonce, plaintext, aad) }, deviceSignature: new Uint8Array(64) };
+        envelope = { ...envelope, deviceSignature: (await signer.sign(messageEnvelopeInput(envelope, context), signal)).slice() };
+        throwIfAborted(signal);
+        if (certificateId(signer.certificate, context) !== senderId)
+            throw new ProtocolError('invalid_identity', 'Device signer changed identity during message signing.');
+        verifyMessageEnvelope(envelope, certificate, context);
+        const recipientBoxes = sealKeys(envelope, recipient, recipients, contentKey, context, random);
+        const senderBoxes = senders && sealKeys(envelope, certificate.account, senders, contentKey, context, random);
+        const result = { envelope, recipientBoxes, ...(senderBoxes ? { senderBoxes } : {}), ...(authorization ? { authorization } : {}) };
+        validateMessageSendRequest(result, createdAt);
+        throwIfAborted(signal);
+        return result;
+    }
+    finally {
+        contentKey?.fill(0);
+        plaintext.fill(0);
+    }
+}
+function copyDevices(values, account, now, context) {
+    if (values.length < 1 || values.length > 8)
+        throw new ProtocolError('invalid_size', 'Message encryption requires between one and eight devices per account.');
+    const ids = new Set();
+    return values.map(value => {
+        const copy = deviceCertificateCodec.decode(deviceCertificateCodec.encode(value));
+        validateCertificate(copy, context);
+        if (copy.account !== account || copy.notBefore > now || now >= copy.expiresAt)
+            throw new ProtocolError('unauthorized_device', 'Encryption certificate belongs to another account or is outside its validity window.');
+        const id = certificateId(copy, context);
+        if (ids.has(id))
+            throw new ProtocolError('duplicate_device', 'Duplicate encryption device.');
+        ids.add(id);
+        return copy;
+    });
+}
+function sealKeys(envelope, account, certificates, contentKey, context, random) {
+    return certificates.map(certificate => {
+        let ephemeral;
+        let shared;
+        let wrappingKey;
+        try {
+            ephemeral = random.bytes(32);
+            requireLength(ephemeral, 32, 'Ephemeral private key');
+            const box = { deviceId: certificateId(certificate, context), alg: 'X25519-HKDF-SHA256-AES256GCM', enc: encryptionPublicKey(ephemeral) };
+            shared = agreeKey(ephemeral, certificate.encryptionPublicKey);
+            const aad = messageKeyBoxAad(envelope, box, account, context);
+            wrappingKey = deriveKey(shared, keyBoxSalt, aad);
+            const nonce = random.bytes(12);
+            requireLength(nonce, 12, 'Key box nonce');
+            return { ...box, sealedKey: concatBytes(nonce, encryptAes(wrappingKey, nonce, contentKey, aad)) };
+        }
+        finally {
+            ephemeral?.fill(0);
+            shared?.fill(0);
+            wrappingKey?.fill(0);
+        }
+    });
+}
+/** Local key access failures are retryable reception failures, never grounds for discarding a remote message. */
+export class MessageKeyAccessError extends Error {
+    name = 'MessageKeyAccessError';
+}
+/** Verifies signature before key agreement and returns no plaintext until both GCM authentications and complete JSON validation pass. */
+export async function decryptMessage(options) {
+    const { context, receiver, signal } = options;
+    throwIfAborted(signal);
+    const envelope = messageEnvelopeCodec.decode(messageEnvelopeCodec.encode(options.envelope));
+    const box = messageKeyBoxCodec.decode(messageKeyBoxCodec.encode(options.keyBox));
+    const sender = deviceCertificateCodec.decode(deviceCertificateCodec.encode(options.sender));
+    verifyMessageEnvelope(envelope, sender, context);
+    validateMessageKeyBox(box);
+    // Public low-order-point validation distinguishes malformed remote input from failures opening local protected keys.
+    const probe = agreeKey(new Uint8Array(32).fill(1), box.enc);
+    probe.fill(0);
+    let local;
+    try {
+        local = deviceCertificateCodec.decode(deviceCertificateCodec.encode(receiver.certificate));
+        validateCertificate(local, context);
+    }
+    catch (cause) {
+        throw new MessageKeyAccessError('Local device certificate is unavailable or invalid.', { cause });
+    }
+    const localId = certificateId(local, context);
+    if (local.account !== envelope.from && local.account !== envelope.to || box.deviceId !== localId)
+        throw new ProtocolError('invalid_identity', 'Message or key box belongs to another account or device.');
+    let shared;
+    let wrappingKey;
+    let contentKey;
+    let plaintext;
+    try {
+        try {
+            shared = await receiver.deriveSharedSecret(box.enc.slice(), signal);
+            throwIfAborted(signal);
+            if (certificateId(receiver.certificate, context) !== localId)
+                throw new Error('Decrypting device changed identity during key agreement.');
+            requireLength(shared, 32, 'X25519 shared secret');
+            if (shared.every(byte => byte === 0))
+                throw new MessageKeyAccessError('Device key agreement produced an all-zero shared secret.');
+        }
+        catch (cause) {
+            throwIfAborted(signal);
+            if (cause instanceof MessageKeyAccessError)
+                throw cause;
+            throw new MessageKeyAccessError('Local device key agreement failed.', { cause });
+        }
+        const aad = messageKeyBoxAad(envelope, box, local.account, context);
+        wrappingKey = deriveKey(shared, keyBoxSalt, aad);
+        contentKey = decryptAes(wrappingKey, box.sealedKey.subarray(0, 12), box.sealedKey.subarray(12), aad);
+        requireLength(contentKey, 32, 'Content key');
+        plaintext = decryptAes(contentKey, envelope.payload.nonce, envelope.payload.ciphertext, messageAad(envelope, context));
+        return messagePayloadCodec.decode(parseJson(plaintext));
+    }
+    finally {
+        shared?.fill(0);
+        wrappingKey?.fill(0);
+        contentKey?.fill(0);
+        plaintext?.fill(0);
+    }
+}
+//# sourceMappingURL=messages.js.map

package/dist/crypto/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/crypto/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAA6B,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,mBAAmB,EAA0B,MAAM,uBAAuB,CAAC;AAC3H,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,qBAAqB,EAC/F,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAqB,MAAM,iBAAiB,CAAC;AAE3J,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAEjE,SAAS,cAAc,CAAC,KAAoB;IACxC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;AACzM,CAAC;AACD,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,KAAoB,EAAE,OAAuB;IACpE,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAClM,CAAC;AACD,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAqE,EAAE,GAAoD,EAAE,OAAe,EAAE,OAAuB;IAClM,cAAc,CAAC,KAAK,CAAC,CAAC;IAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAClJ,IAAI,OAAO,KAAK,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;IAClJ,IAAI,GAAG,CAAC,GAAG,KAAK,8BAA8B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,8CAA8C,CAAC,CAAC;IACxL,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS;QAClI,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACvK,CAAC;AAMD,oIAAoI;AACpI,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IAC/D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,SAAS,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7J,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAClK,IAAI,SAAS,GAAG,WAAW,CAAC,SAAS,IAAI,SAAS,IAAI,WAAW,CAAC,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,4DAA4D,CAAC,CAAC;IAC1L,IAAI,SAAS,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,2DAA2D,CAAC,CAAC;IAC7N,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAC1G,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,UAAkC,CAAC;IACvC,IAAI,CAAC;QACD,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;QAC1E,IAAI,QAAQ,GAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACtL,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1H,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAC;QACnK,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9F,MAAM,WAAW,GAAG,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAuB,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACtJ,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IACzF,CAAC;YAAS,CAAC;QAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACzD,CAAC;AACD,SAAS,WAAW,CAAC,MAAoC,EAAE,OAAe,EAAE,GAAW,EAAE,OAAuB;IAC5G,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wEAAwE,CAAC,CAAC;IAC9J,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtB,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrH,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,sFAAsF,CAAC,CAAC;QACtN,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IACpK,CAAC,CAAC,CAAC;AACP,CAAC;AACD,SAAS,QAAQ,CAAC,QAAyB,EAAE,OAAe,EAAE,YAA0C,EAAE,UAAsB,EAAE,OAAuB,EAAE,MAAoB;IAC3K,OAAO,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;QAClC,IAAI,SAAiC,CAAC;QAAC,IAAI,MAA8B,CAAC;QAAC,IAAI,WAAmC,CAAC;QACnH,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACpF,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,8BAA8B,EAAE,GAAG,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxI,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAChH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;YAC1E,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACtG,CAAC;gBAAS,CAAC;YAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACP,CAAC;AAGD,iHAAiH;AACjH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAAqB,IAAI,GAAG,uBAAuB,CAAC;CAAE;AAKtG,yIAAyI;AACzI,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IAC/D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5F,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7E,qHAAqH;IACrH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IACxI,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,qDAAqD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACpH,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0DAA0D,CAAC,CAAC;IAC1M,IAAI,MAA8B,CAAC;IAAC,IAAI,WAAmC,CAAC;IAAC,IAAI,UAAkC,CAAC;IAAC,IAAI,SAAiC,CAAC;IAC3J,IAAI,CAAC;QACD,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5F,IAAI,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC1I,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,qBAAqB,CAAC,0DAA0D,CAAC,CAAC;QACtI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,KAAK,YAAY,qBAAqB;gBAAE,MAAM,KAAK,CAAC;YACxD,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QACtH,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACrG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;QAC7C,SAAS,GAAG,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACvH,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACjG,CAAC"}

package/dist/crypto/primitives.d.ts

@@ -0,0 +1,30 @@
+import { sha256 } from '@noble/hashes/sha2.js';
+export { sha256 };
+/** Platform cryptographic random source; implementations must never use Math.random. */
+export interface RandomSource {
+    bytes(length: number): Uint8Array;
+}
+/** Browser and Node.js random source. Expo supplies an explicit native source. */
+export declare const systemRandom: RandomSource;
+export declare function requireLength(value: Uint8Array, length: number, name: string): void;
+/** Ed25519 public key derived from a 32-byte seed. */
+export declare function devicePublicKey(seed: Uint8Array): Uint8Array;
+/** Signs the exact supplied bytes with Ed25519. */
+export declare function signDevice(input: Uint8Array, seed: Uint8Array): Uint8Array;
+/** Uses strict RFC 8032 verification, not permissive ZIP215 acceptance. */
+export declare function verifyDevice(input: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
+/** Compressed P-256 public key, in the format used by Neo N3 accounts. */
+export declare function accountPublicKey(privateKey: Uint8Array): Uint8Array;
+/** Verifies SHA-256 / P-256 compact signatures; both valid high-S and low-S forms are accepted. */
+export declare function verifyAccount(input: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
+/** Low-level signing helper; application signers retain ownership of account keys. */
+export declare function signAccount(input: Uint8Array, privateKey: Uint8Array, random?: RandomSource): Uint8Array;
+export declare function encryptionPublicKey(privateKey: Uint8Array): Uint8Array;
+export declare function agreeKey(privateKey: Uint8Array, publicKey: Uint8Array): Uint8Array;
+export declare function hash160(value: Uint8Array): Uint8Array;
+export declare function deriveKey(secret: Uint8Array, salt: Uint8Array, info: Uint8Array, length?: number): Uint8Array;
+/** AES-256-GCM ciphertext followed by a 16-byte tag. The caller guarantees nonce uniqueness. */
+export declare function encryptAes(key: Uint8Array, nonce: Uint8Array, plaintext: Uint8Array, aad: Uint8Array): Uint8Array;
+/** Authenticates before exposing plaintext; malformed ciphertext is a protocol failure. */
+export declare function decryptAes(key: Uint8Array, nonce: Uint8Array, ciphertext: Uint8Array, aad: Uint8Array): Uint8Array;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/crypto/primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../../src/crypto/primitives.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAM/C,OAAO,EAAE,MAAM,EAAE,CAAC;AAElB,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAAG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE;AAEnE,kFAAkF;AAClF,eAAO,MAAM,YAAY,EAAE,YAU1B,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGnF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAG5D;AAED,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAG1E;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAGrG;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAGnE;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAGtG;AAED,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAE,YAA2B,GAAG,UAAU,CAMtH;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAGtE;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAKlF;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAqC;AAE3F,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,SAAK,GAAG,UAAU,CAEzG;AAED,gGAAgG;AAChG,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAIjH;AAED,2FAA2F;AAC3F,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAMlH"}

package/dist/crypto/primitives.js

@@ -0,0 +1,102 @@
+import { ed25519, x25519 } from '@noble/curves/ed25519.js';
+import { p256 } from '@noble/curves/nist.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { ripemd160 } from '@noble/hashes/legacy.js';
+import { hkdf } from '@noble/hashes/hkdf.js';
+import { gcm } from '@noble/ciphers/aes.js';
+import { ProtocolError } from '../errors.js';
+export { sha256 };
+/** Browser and Node.js random source. Expo supplies an explicit native source. */
+export const systemRandom = {
+    bytes(length) {
+        if (!Number.isSafeInteger(length) || length < 0)
+            throw new RangeError('Invalid random byte count.');
+        if (!globalThis.crypto?.getRandomValues)
+            throw new ProtocolError('random_unavailable', 'A cryptographic random source is required.');
+        const result = new Uint8Array(length);
+        for (let offset = 0; offset < length; offset += 65_536)
+            globalThis.crypto.getRandomValues(result.subarray(offset, offset + 65_536));
+        return result;
+    },
+};
+export function requireLength(value, length, name) {
+    if (!(value instanceof Uint8Array) || value.length !== length)
+        throw new ProtocolError('invalid_length', `${name} must contain ${length} bytes.`);
+}
+/** Ed25519 public key derived from a 32-byte seed. */
+export function devicePublicKey(seed) {
+    requireLength(seed, 32, 'Ed25519 seed');
+    return ed25519.getPublicKey(seed);
+}
+/** Signs the exact supplied bytes with Ed25519. */
+export function signDevice(input, seed) {
+    requireLength(seed, 32, 'Ed25519 seed');
+    return ed25519.sign(input, seed);
+}
+/** Uses strict RFC 8032 verification, not permissive ZIP215 acceptance. */
+export function verifyDevice(input, signature, publicKey) {
+    if (signature.length !== 64 || publicKey.length !== 32)
+        return false;
+    return ed25519.verify(signature, input, publicKey, { zip215: false });
+}
+/** Compressed P-256 public key, in the format used by Neo N3 accounts. */
+export function accountPublicKey(privateKey) {
+    requireLength(privateKey, 32, 'P-256 private key');
+    return p256.getPublicKey(privateKey, true);
+}
+/** Verifies SHA-256 / P-256 compact signatures; both valid high-S and low-S forms are accepted. */
+export function verifyAccount(input, signature, publicKey) {
+    if (signature.length !== 64 || publicKey.length !== 33 || (publicKey[0] !== 2 && publicKey[0] !== 3))
+        return false;
+    return p256.verify(signature, input, publicKey, { prehash: true, lowS: false, format: 'compact' });
+}
+/** Low-level signing helper; application signers retain ownership of account keys. */
+export function signAccount(input, privateKey, random = systemRandom) {
+    requireLength(privateKey, 32, 'P-256 private key');
+    const entropy = random.bytes(32);
+    requireLength(entropy, 32, 'Signing entropy');
+    try {
+        return p256.sign(input, privateKey, { prehash: true, lowS: false, format: 'compact', extraEntropy: entropy });
+    }
+    finally {
+        entropy.fill(0);
+    }
+}
+export function encryptionPublicKey(privateKey) {
+    requireLength(privateKey, 32, 'X25519 private key');
+    return x25519.getPublicKey(privateKey);
+}
+export function agreeKey(privateKey, publicKey) {
+    requireLength(privateKey, 32, 'X25519 private key');
+    requireLength(publicKey, 32, 'X25519 public key');
+    try {
+        return x25519.getSharedSecret(privateKey, publicKey);
+    }
+    catch (cause) {
+        throw new ProtocolError('invalid_key', 'X25519 agreement failed, including an all-zero shared secret.', { cause });
+    }
+}
+export function hash160(value) { return ripemd160(sha256(value)); }
+export function deriveKey(secret, salt, info, length = 32) {
+    return hkdf(sha256, secret, salt, info, length);
+}
+/** AES-256-GCM ciphertext followed by a 16-byte tag. The caller guarantees nonce uniqueness. */
+export function encryptAes(key, nonce, plaintext, aad) {
+    requireLength(key, 32, 'AES-256 key');
+    requireLength(nonce, 12, 'GCM nonce');
+    return gcm(key, nonce, aad).encrypt(plaintext);
+}
+/** Authenticates before exposing plaintext; malformed ciphertext is a protocol failure. */
+export function decryptAes(key, nonce, ciphertext, aad) {
+    requireLength(key, 32, 'AES-256 key');
+    requireLength(nonce, 12, 'GCM nonce');
+    if (ciphertext.length < 16)
+        throw new ProtocolError('invalid_ciphertext', 'Missing GCM tag.');
+    try {
+        return gcm(key, nonce, aad).decrypt(ciphertext);
+    }
+    catch (cause) {
+        throw new ProtocolError('invalid_ciphertext', 'GCM authentication failed.', { cause });
+    }
+}
+//# sourceMappingURL=primitives.js.map

package/dist/crypto/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../../src/crypto/primitives.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,MAAM,EAAE,CAAC;AAKlB,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAiB;IACtC,KAAK,CAAC,MAAM;QACR,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACpG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe;YACnC,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,MAAM;YAClD,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,MAAc,EAAE,IAAY;IACzE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QACzD,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,GAAG,IAAI,iBAAiB,MAAM,SAAS,CAAC,CAAC;AAC3F,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC5C,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,IAAgB;IAC1D,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,SAAqB,EAAE,SAAqB;IACxF,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACnD,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,SAAqB,EAAE,SAAqB;IACzF,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnH,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,UAAsB,EAAE,MAAM,GAAiB,YAAY;IACtG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;YAC9G,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAsB;IACtD,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,UAAsB,EAAE,SAAqB;IAClE,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACpD,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAClD,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,+DAA+D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;AACzI,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAiB,IAAgB,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3F,MAAM,UAAU,SAAS,CAAC,MAAkB,EAAE,IAAgB,EAAE,IAAgB,EAAE,MAAM,GAAG,EAAE;IACzF,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,KAAiB,EAAE,SAAqB,EAAE,GAAe;IACjG,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,KAAiB,EAAE,UAAsB,EAAE,GAAe;IAClG,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC9F,IAAI,CAAC;QAAC,OAAO,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;AAC7G,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,11 @@
+/** A local encoding, identity, signature, or authorization violation. */
+export declare class ProtocolError extends Error {
+    readonly code: string;
+    readonly name = "ProtocolError";
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+/** A persisted operation cannot safely overwrite the current revision. */
+export declare class StateConflictError extends Error {
+    readonly name = "StateConflictError";
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qBAAa,aAAc,SAAQ,KAAK;IAGxB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,SAAkB,IAAI,mBAAmB;IAEzC,YAAqB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAEzE;CACJ;AAED,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IACzC,SAAkB,IAAI,wBAAwB;CACjD"}

package/dist/errors.js

@@ -0,0 +1,14 @@
+/** A local encoding, identity, signature, or authorization violation. */
+export class ProtocolError extends Error {
+    code;
+    name = 'ProtocolError';
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+    }
+}
+/** A persisted operation cannot safely overwrite the current revision. */
+export class StateConflictError extends Error {
+    name = 'StateConflictError';
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGf,IAAI;IAFP,IAAI,GAAG,eAAe,CAAC;IAEzC,YAAqB,IAAY,EAAE,OAAe,EAAE,OAAsB;QACtE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBADP,IAAI;IAEzB,CAAC;CACJ;AAED,0EAA0E;AAC1E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACvB,IAAI,GAAG,oBAAoB,CAAC;CACjD"}

package/dist/groups/account-sync.d.ts

@@ -0,0 +1,28 @@
+import type { DeviceManager } from '../components/device.js';
+import type { MessageManager } from '../components/message.js';
+import { ProtocolError } from '../errors.js';
+import { type GroupRef } from '../models/groups.js';
+import type { NetworkContext } from '../protocol/context.js';
+import { type RuntimeClock } from '../runtime/clock.js';
+import type { MeshlineStore } from '../storage/store.js';
+import { type GroupSecrets } from './secrets.js';
+export interface GroupAccountSyncOptions {
+    readonly store: MeshlineStore;
+    readonly context: NetworkContext;
+    readonly accountId: string;
+    readonly clock: RuntimeClock;
+    readonly device: DeviceManager;
+    readonly messages: MessageManager;
+    readonly secrets: GroupSecrets;
+    rejected(messageId: string, error: ProtocolError): void;
+}
+/** One consumer cursor commits with all key effects; local protection/storage failures remain retryable. */
+export declare class GroupAccountSync {
+    #private;
+    readonly options: GroupAccountSyncOptions;
+    constructor(options: GroupAccountSyncOptions);
+    request(signal?: AbortSignal): Promise<void>;
+    consume(signal: AbortSignal): Promise<void>;
+    shareCurrent(group: GroupRef, signal: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=account-sync.d.ts.map

package/dist/groups/account-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-sync.d.ts","sourceRoot":"","sources":["../../src/groups/account-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAsB,MAAM,cAAc,CAAC;AAIjE,OAAO,EAC4I,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE9L,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAwD,MAAM,qBAAqB,CAAC;AAG/G,OAAO,EAAmD,KAAK,YAAY,EAA0B,MAAM,cAAc,CAAC;AAE1H,MAAM,WAAW,uBAAuB;IACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC1H,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAClG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC3D;AAeD,4GAA4G;AAC5G,qBAAa,gBAAgB;;IACb,QAAQ,CAAC,OAAO,EAAE,uBAAuB;IAArD,YAAqB,OAAO,EAAE,uBAAuB,EAAI;IACzD,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAA+H;IACrK,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhD;IAuDK,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAuD;CA+BjI"}